RE: [Full-Disclosure] Blocking Music Sharing.

[daniel uriah clemens <daniel_clemens@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

Snort is passive, therefore it does not defaulty block anything it merely
alerts upon the ruleset you have setup.

Snort-Inline can work in a more active mode.

-Dan
On Mon, 15 Sep 2003, Jason Bethune wrote:

> Snort is one tool used by alot of IT guys to block file sharing programs.
> THe trouble with these programs is that they have built in port "movers"
> that will scan the local network to find an available port to work on.
> Scripting is one way to do it....but that mostly just alerts you to the fact
> that there is traffice being used on your network for file sharing. I would
> like to know an exact way to block file sharing as well...
>
>
> Jason Bethune
>
>
>
> IT Specialist
>
> Town of Kentville
>
> 354 Main Street
>
> Kentville, NS
>
> B4N 1K6
>
>
>
> www.town.kentville.ns.ca
>
>
>
>   _____
>
> From: full-disclosure-admin@xxxxxxxxxxxxxxxx
> [mailto:full-disclosure-admin@xxxxxxxxxxxxxxxx] On Behalf Of Johnson, Mark
> Sent: Monday, September 15, 2003 1:37 PM
> To: full-disclosure@xxxxxxxxxxxxxxxx
> Subject: [Full-Disclosure] Blocking Music Sharing.
>
>
> Due to the legal issues, I am trying to block access to sites like Kazaa and
> Limewire in the office.  If I am not mistaken, these networks can use
> different ports each time, so there is no way to block it at the firewall.
> Is this right?  And if so, what is the best way to block access to these
> types of sites?
>
> Many thanks,
> Mark J.
>

-Daniel Uriah Clemens

Esse quam videra
     (to be, rather than to appear)
                     -Moments of Sorrow are Moments of Sobriety
http://www.birmingham-infragard.org   | 2053284200
fingerprint: EDF0 6566 2A4A 220E 5760  EA1F 0424 6DF6 F662 F5BD


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html